parent DN and deref control
by Michael Ströder
Hmm...
I have a use-case where it would be handy to use the deref control to request
attributes from an entry's parent entry. But this would require kind of a
pseudo-attribute 'parentDN' (similar to 'entryDN').
Anybody aware whether such a thing is already available?
[1] https://tools.ietf.org/html/draft-masarati-ldap-deref-00
Nope, I don't want to use collective attributes.
Ciao, Michael.
8 years, 2 months
cannot delete pwdFailureTime attribute
by David Magda
Hello,
How do I delete the pwdFailureTime attribute on a slave?
I have a DN where pwdFailureTime entries are growing and its slowly
filling up /var/lib/ldap/. Ive tried the following LDIF:
dn: uid=foo,ou=People,dc=example,dc=com
changetype: modify
delete: pwdFailureTime
But since the system is slave, its giving ldapmodify(1) a redirect to the
master. I've also tried the script in ITS#8185:
http://www.openldap.org/lists/openldap-bugs/201507/msg00012.html
that connects to ldapi:///, and that also referral/redirects (since we
have olcUpdateRef configured). We are not using the slapo-chain(5)
funcionality.
Is there any way to manipulate pwdFailureTime on the slaves without going
into the raw databases files? Or do we have to enable slapo-chain(5) when
using slapo-ppolicy(5) and then do things on the master?
Thanks for any info.
Regards,
David
8 years, 2 months
How to build contrib pw-radius?
by dev
Hi,
I'm trying to build the pw-radius module in the contrib directory but
can't seem to find the right library to add to the incantation.
I've tried installing the freeradius-dev package as well as the
libradiusclient-ng-dev but still no radlib.h. A google on the error
message[1] returns *exactly* two results so I'm kind of at a loss.
Can someone point me in the direction of the correct radius package to
install to get this built?
[1]
test# gcc -shared -I../../../include -Wall -g -o pw-radius.so radius.c
-lradius
radius.c:27:20: fatal error: radlib.h: No such file or directory
compilation terminated.
8 years, 2 months
Is it possible to create something like an alias or mapping
by Christian Balz
Hi for all,
We have an application that search an attribute named 'manager', however in our OpenLDAP this attribute is called 'DomainGestor'.
Is it possible to create something like an alias or mapping. So, when the application is called the attribute 'manager' the ldap return the value of 'DomainGestor'
DomainGestor uid=userX,cn=u,cn=users,dc=mydomain,dc=com
Regards
Christian
8 years, 2 months
